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■ Abstract 



A strong confluence result for Q*, a quantum A-calculus with measurements, is proved. 
More precisely, confluence is shown to hold both for finite and infinite computations. The 
technique used in the confluence proof is syntactical but innovative. This makes Q* different 
from similar quantum lambda calculi, which are either measurement-free or provided with a 
reduction strategy. 

1 Introduction 



It is well known that the measurement-free evolution of a quantum system is deterministic. As a 
consequence it is to be expected that a good measurement-free quantum lambda calculus enjoys 
confluence. This is the case of Q, by the authors [5] and of the lambda calculus recently introduced 
by Arrighi and Dowek [I] . The situation becomes more complicated if we introduce a measurement 
operator. In fact measurements break the deterministic evolution of a quantum system^: in 
If) . presence of measurements the behaviour becomes irremediably probabilistic. 

An explicit measurement operator in the syntax allows an observation at an intermediate step of 
. the computation: this feature is needed if we want, for example, to write algorithms such as Shor's 

factorization. In quantum calculi the intended meaning of a measurement is the observation of a 
(possibly superimposed) quantum bit, giving as output a classical bit; the two possible outcomes 
(i.e., the two possible values of the obtained classical bit) can be observed with two probabilities 
summing to 1. Since measurement forces a probabilistic evolution in the computation, it is not 
surprising that we need probabilistic instruments in order to investigate the main features of the 
language. 

In this paper, we study an extension of Q obtained by endowing the language of terms with 
a suitable measurement operator and coherently extending the reduction relation, which becomes 
probabilistic for the reasons we have just explained. We investigate the resulting calculus, called 
Q*, focusing, in particular, on confluence. 

In Q* and Q, states are formalized by configurations, i.e., triples in the form [Q, QV, M], where 
M is a lambda term, Q is a quantum state, and QV is a set of names of quantum variables. 
So, control is classical (M is simply a term) while data is quantum (Q is an element of a finite- 
dimensional Hilbert space). 

We are interested in the following question: what happens to properties such as confluence in 
presence of measurements? And moreover: is it possible to preserve confluence in the probabilistic 
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setting induced by measurements? Apparently, the questions above cannot receive a positive 
answer: as we will see in section |4j it is possible to exhibit a configuration C such that there 
are two different reductions starting at C and ending in two essentially different configurations 
in normal form [1,0,0] and [1,0,1]. In other words, confluence fails in its usual form. But the 
question now becomes: are the usual notions of computations and confluence adequate in this 
setting? 

In Q*, there are two distinct sources of divergence: 

• On the one hand, a redex involving the measurement operator can be reduced in two different 
ways, i.e., divergence can come from a single redex. 

• On the other hand, a term can contain more than one redex and Q* is not endowed with a 
reduction strategy. As a consequence, some configurations can be reduced in different ways 
due to the presence of distinct redexes in a term. 

We cannot hope to be confluent with respect to the first source of divergence, but we can anyway 
ask ourselves whether all reduction strategies are somehow equivalent. More precisely, we say that 
Q* is confluent if for every configuration C and for every configuration in normal form D, there 
is a fixed real number p such that the probability of observing D when reducing C is always p, 
independently of the reduction strategy. 

This notion of confluence can be easily captured by analyzing rewriting on mixed states rather 
than rewriting on configurations. A mixed state is a probabilistic distribution on configurations 
whose support is finite. Rewriting on configurations naturally extend to rewriting on mixed states. 
Rewriting on mixed states is not a probabilistic relation, and confluence is the usual confluence 
coming from rewriting theory |16j . 

In this paper, we prove that Q* is indeed confluent in this sense. Technically, confluence is 
proved in an innovative way. The key point is that we need a new definition of computation. 
The usual notion of computation as a sequence of configurations is not adequate here. A notion 
of probabilistic computation replaces it, as something more general than a linear sequence of 
configurations but less general than the reduction tree: a probabilistic computation is a (possibly) 
infinite tree, in which binary choice (a node can have at most two children) corresponds to the two 
possible outcomes of a measurement. This new notion of computation is needed, because proving 
confluence directly on mixed states is non-trivial. As by-products, we prove other results in the 
style of confluence. 

Another important property of any quantum lambda calculus with measurements is the im- 
portance of infinite computations. In the case of standard lambda calculus, the study of infinite 
computations is strongly related to the study of infinite lambda terms. This is not the case of Q* 
(and in general of quantum calculi with measurements). This phenomenon forced us to extend 
the study of confluence to the case of infinite probabilistic computations. The proposed analysis 
is not standard and is based on new techniques. 

The rest of this paper is structured as follow: 

• in Section [2] the quantum A-calculus Q* is introduced; 

• in Section |4] we introduce the confluence problem in an informal way; 

• in Section [5] we give the definition of a probabilistic computation; 

• in Section [5] a strong confluence result on probabilistic computations is given; 

• in Section [7] mixed states and mixed computations are introduced, and we give a conlucncc 
theorem for mixed computations. 

2 The Calculus Q* 

In [5] we have introduced a measurement-free, untyped quantum A-calculus, called Q, based on 
the quantum data and classical control paradigm (see e.g. [131 114p . In this paper we generalize Q 
by extending the class of terms with a measurement operator, obtaining Q*. 

As for Q, Q* is based on the notion of a configuration (see Section 13. ip . namely a triple 
[Q,QV,M] where Q is a quantum registeiQ QV is a finite set of names, called quantum vari- 

2 the "empty" quantum register will be denoted with the scalar number 1. 
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ables, and M is an untyped term based on the linear lambda-calculus defined by Wadler |17| and 
Simpson [15] , 

Quantum registers are systems of n qubits, that, mathematically speaking, are normalized 
vectors of finite dimensional Hilbert spaces. In particular, a quantum register Q of a configuration 
[Q, QV, M], is a normalized vector of the Hilbert space £ 2 ({0, 1} SV ), denoted here with H(QV)d 
Roughly speaking, the reader could think that quantum variables are references to qubits in a 
quantum register. 

There are three kinds of operations on quantum registers: (i) the creation of a new qubit; (ii) 
unitary operators: each unitary operator U// gi! corresponds to a pure quantum operation 
acting on qubits with names q\ , . . . , q n (mathematically, a unitary transform on the Hilbert space 
H({qi, . . . , q n }), see [5]); (Hi) one qubit measurement operations M r ,a, -M. r ,i responsible of the 
probabilistic reduction of the quantum state plus the destruction of the qubit referenced by r: 
given a quantum register Q £ Ti.(QV), and a quantum variable name r G QV, we allow the 
(destructive) measurement of the qubit with name r (see Section [3] for more details) . 

We conclude this short overview with few words on the set of elementary unitary operators. 
We say that a class {Ui}i 6 / is elementary iff for every i € I , the unitary operator U, is realizable, 
either physically (i.e. by a laser or by other apparatus) or by means of a computable devices, such 
as a Turing machine. Different classes of elementary operators could be defined, among these, a 
remarkable class is those of computable operators, see e.g. [51 151 151 HU1 [TT] . 



2.1 Terms, Judgements and Well-Formed-Terms 

Let IA an elementary set of unitary operators. Let us associate to each elementary operator U €hi 
a symbol U. The set of term expressions, or terms for short, is defined by the following grammar: 

x ::= xq,xi,... classical variables 

r ::— ro,r\,... quantum variables 

tt ::— x | (xi,...,x n ) linear patterns 

tp ::= 7r | \x patterns 

B ::= | 1 boolean constants 

U ::= Uq,U\,... unitary operators 

C ::— B | U constants 

M ::= x | r | \M | C \ new(M) | M X M 2 | 

meas(M) | if N then Mi else M 2 \ 

(Mi M n ) \ Xip.M | terms (where n>2) 

We assume to work modulo variable renaming, i.e. terms are equivalence classes modulo a- 
conversion. Substitution up to a-equivalence is defined in the usual way. Since we are working 
modulo a-conversion, we are authorized to use the so called Barendregt Convention on Variables 
(shortly, BCV) [2]: in each mathematical context (a term, a definition, a proof...) the names 
chosen for bound variables will always differ from those of the free ones. 

Let us denote with Q(Mi, . . . , Mk) the set of quantum variables occurring in M±,...,Mk- 
Notice that: 

• Variables are either classical or quantum: the first ones are the usual variables of lambda 
calculus (and can be bound by abstractions), while each quantum variable refers to a qubit in 
the underlying quantum register (to be defined shortly). 

• There are two sorts of constants as well, namely boolean constants (0 and 1) and unitary 
operators: the first ones are useful for generating qubits and play no significant role in clas- 
sical computation, while unitary operators are applied to (tuples of) quantum variables when 
performing quantum computation. 

• The term constructor new(-) creates a new qubit when applied to a boolean constant. 

• The term constructor meas(-) perform a single qubit measurement when applied to a quantum 
variable. 



3 see [5] for a full discussion of 'H(QV) and [12] for a general treatment of £ 2 (S) spaces. 
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• The syntax allows the so called pattern abstraction. A pattern is either a classical variable, 
a tuple of classical variables, or a "banged" variable (namely an expression \x, where x is 
a classical variable). In order to allow an abstraction of the kind Xlx.M, environments (see 
below) can contain !-patterns, denoting duplicable or erasable variables. 

For each qvs QV and for each quantum variable r € QV, we assume to have two, measurement 
based, linear transformation of quantum registers: A4 r ,o, -M r ,i '■ Ti-(QV) — > Ti(QV — {r}) (see 
Section [3] for more details). 

Judgements arc defined from various notions of environments, that take into account the way 
the variables are used. Following common notations in type theory and proof theory, a set of 
variables {x\, . . . , x n } is often written simply as x%, . . . , x n . Analogously, the union of two sets of 
variables X and Y is denoted simply as X, Y. 

• A classical environment is a (possibly empty) set of classical variables. Classical environments 
are denoted by A (possibly with indexes). Examples of classical environments are Xi,x% or 
x, y, z or the empty set 0. Given a classic environment A = xx, . . . , x n , !A denotes the set of 
patterns \x%, . . . , \x n . 

• A quantum environment is a (possibly empty) set (denoted by 0, possibly indexed) of quantum 
variables. Examples of quantum environments are ri,r2,rs and the empty set 0. 

• A linear environment is (possibly empty) set (denoted by A, possibly indexed) in the form 
A, O where A is a classical environment and Q is a quantum environment. The set x%,X2,ri 
is an example of a linear environment. 

• An environment (denoted by T, possibly indexed) is a (possibly empty) set in the form A, !A 
where each classical variable x occurs at most once (either as \x or as a;) in T. For example, 
x\,ri, \x2 is an environment, while X\, \x\ is not an environment. 

• A judgement is an expression Y b M, where Y is an environment and M is a term. 

const qvar cvar der 

!AhC !A,rhr \A,xhx !A,!ihi 

!A h M Ai,!A h M A 2 ,!AhJV Ai, !A r- M\ ■ ■ ■ A k , !A r- M k 

prom app tens 

!AHlf Ai,A 2 ,!A h MN Ai, . . . , A fc , !A r- {Mi, . . . , M k ) 

Y\-M T,xi,...,x n h M V,x\-M T,\xhM 

new laml | am 2 Iam3 

rhnew(Af) rh \{x lt ...,x n ).M T h Xx.M T h Wx.M 

r h M A I- N !A h Mi !A h- M 2 

meas if 

rhmeas(A/) A, !A h if N then Mi else M% 



Figure 1: Well-Forming Rules 

We say that a judgement Y b M is well-formed (notation: >Th M) if it is derivable from the 
well-forming rules in FigurefTJ The rules app and tens are subject to the following constraint: for 
each i ^ j AjPlAj =0 (notice that Aj and Aj are sets of linear and quantum variables, being linear 
environments). With d > Y h M we mean that d is a derivation of the well-formed judgement 
r h M. If r b M is well-formed, the term M is said to be is well-formed with respect to the 
environment Y. A term M is well-formed if the judgement Q(M) b M is well-formed. 

Remark 1 Q* comes equipped with two constants and 1, and an if (■) then (•) else (•) con- 
structor. However, these constructors can be thought of as syntactic sugar. Indeed, and 1 can 
be encoded as pure terms: = Xlx.Xly.y and 1 = Wx.Xly.x. In doing so, if M then N else L 
becomes M\N\L. The well-forming rule if (see Figure^) of Q* fully agrees with the above encod- 
ings. 
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3 Quantum Registers and Measurements 

Before giving the definition of destructive measurement used in this paper we must clarify some- 
thing about quantum spaces. 

The smallest quantum space is Ti{%), which is (isomorphic to) the field C. The so called empty 
quantum register is nothing more than a unitary element of C (i.e., a complex number c such 
that \c\ = 1). We have chosen the scalar number 1 as the canonical empty quantum register. In 
particular the number 1 represents also the computational basis of 7i(0). 

It is easy to show that if QV H TZV = then there is a standard isomorphism 

H(QV) ® H(KV) ~ H(QV U TZV). 

In the rest of this paper we will assume to work up-to such an isomorphisnQ. Note that the 
previous isomorphism holds even if either QV or TZV is empty. 

Since a quantum space Ti(QV) is an Hilbert space, Ti(QV) has a zero element Oqv (we will omit 
the subscript, when this does not cause ambiguity). In particular, if QV n TZV — 0, Q G Tt(QV) 
and TZ e H{TZV), then Q ® O^v = Oqv ®TZ = SVu tcv G H(QV U TZV). 

Definition 1 (Quantum registers) Given a quantum space TC(QV), a quantum register is any 
Q G Ti{QV) such that either Q = Ogy or Q is a normalised vector. 

Let QV be a qvs with cardinality n > 1. Moreover, let Q G Ti(QV) and let r G QV.+ Each 
state Q may be represented as follows: 

2 «-i 2 „-i 
Q=Y1 a ' l \ r ^ °) ® bl + ^ X ) &l 

i=l i=l 

where {&i}ie[i 2"- 1 ] is the computational basi^l of 7i(QV — {r}). Please note that if QV = {r}, then 
Q = a\r i— > 0)(H)l+/9|r i— > that is, via the previously stated isomorphism, a|r i— > 0)+(3\r i— ► 1). 

Definition 2 (Destructive measurements) Lei QV 6e a gus ™t/i cardinality n — \QV\ > 1, 

on — 1 

r G QV, {6i} ie [ 12 ™-i] &e i/ie computational basis of Tt(QV — {r}) and Q be ^2 i=1 cti\r *— ► 0) ® 
&i + Si=i Al r l— * 1) ® &i G H(QV). TTie £wo linear functions 

m r , , m r ,a : H(CV) -> H(QV - {r}) 

smc/i i/ia£ 

2 »-i 2 „-i 

™r,o(Q) = X! ai&i m r,i(Q) = Pih 

»=i i=i 

are called destructive measurements. If Q is a quantum register, the probability p c of observing 
c G {0, 1} when observing r in Q is defined as (Q\m r ,c ni r ,c| Q) ■ 

The just defined measurement operators are general measurements [HUH]: 

Proposition 1 (Completeness Condition) Let r G QV and Q G Ti(QV). Then m^ m r .o + 

m r,l m r,l = IdH(QV)- 

4 in particular, if Q 6 H(QV), r QV and |r => c) £ then Q ® |r i— * c) will denote the element 

i s (Q®|r>-»c» eW(2Vu{r}) 

5 in the mathematical literature, computational basis are usually called standard basis; see [5], for the definition 
of computational/standard basis of 7i(QV). 
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Proof. In order to prove the proposition we will use the following general property of inner 
product spaces: let TL be an inner product space and let A : TL — > TL be a linear map. If for each 
x, y G TL, (Ax,y) = (x,y) then A is the identity map^|. Let Q,1Z G TL(QV). If {£<i} ie [1.2™] is the 
computational basis of TL(QV — {r}), then: 



Q = J2a,\r 1 ^ 0) ®&; + ^A|r 1) ® 6j 

i=l i=l 
2™ 2™ 

ft = 5^7ik ^ 0) ® o 2 + ^c5 4 |r 1 * 1) ®b t . 



i=l i=l 

We have: 



((mj. nv )0 + ™l,i™r,i)(Q),K) = (mj i0 m r , (Q), K) + (m^m^^Q),^) 

= (m r ,o(Q), m r)0 (72.)) + (m ril (Q), m r) i(ft)) 

2" 2" 2" 2™ 

i—1 i—1 i—1 i—1 

2" 2" 

i=0 t=0 

= <G,W). 

This concludes the proof. □ 
For c G {0, 1}, the measurement operators m r c enjoys the following properties: 
Proposition 2 Let Q E U{QV). Then: 

1. m rc (Q ® \q i-> d)) = (m r , c (Q)) ® |g h-> d) i/r G QV and ^ QV; 

& (Q® |sh-> d)|m,t c m r!C |Q(g) |s i-> d)) = (Q, m^rn^lQ); if r E QV and r ^ s; 

3. m 3)e (m n(J (Q)) = m, %d (m 9 , e (Q)); i/r, g G QV. 

Proof. 1. Given the computational basis {oi}ig[i,2™] °f Ti(QV — {r}), we have that: 

2" 2™ 

Q® |g H-c d) = ^ai|r i-> 0) ® ® |g 1-* d) +^ / 3 i |r i-> 1) ® &i|r i-> d) 
i=l i=l 

and therefore 

2™ 

m r ,o(Q ® 1° ^ d)) = ® |r h-> d)) 

»=i 

/ 2" \ 



= ^y^ajfrjj ® \q i-> d) 

= (m nc (Q)) ® |gi-> d>. 

In the same way we prove the equality for m r 1. 
2. Just observe that: 

(Q® |s i-> d)|mt !C m r>c |Q® \s i-> d)) = (Q® |s i-> d), mJ )C (m rjC (Q ® \s i-> d)))) 

= (m r , c ((2 ® |s h-> d)), m nc (Q ® \s ^ d))) 
= (m r , c (Q), m r>c (Q)) 
= (fi,mJ. c m r , c Q) = (Q|mJ, c m r , c |Q). 



6 such a property is an immediate consequence of the Riesz representation theorem, see e.g. |12] 
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3. Given the computational basis {&i}ie[i,2«] of H(QV — {r, q}), we have that: 

2" 2™ 



Q=^a t \r h-> 0) ® \q h-> 0) <g> 6, + ^/? 4 |r i-> 0) <g> |g i-> 1) ® 6,+ 

i=l i=l 
2" 2" 

^7 4 |r i-f 1) |g h-» 0) <g> h + ^2Si\r i-> 1) (g) |g i-> 1) (g) o 4 . 



Let us show that m g ,o( m r,o(Q)) = rrv.o( m g.o(Q))7 the proof of other cases follow the same 
pattern. 

nv,o(m 5 ,o(Q)) = m ri0 £ a^r h-> 0) <g> o 4 + ^7il r 1) ® &t 1 

\i=l i=l / 

2™ / 2" 2" \ 

= £«i&i = m 9i0 £ai|9 ^ °) ® &i + £ ^ 1) ® &« I 

i=l Vi=l i=l / 

= m 9 ,o(m r ,o(Q))- 

This concludes the proof. □ 
Given a qvs QV and a variable r € QV, we can define two linear maps: 

^(r,o,A<f,i : W(fiV) -► H(QV - {r}) 

which are "normalized" versions of m ri o an d m r ,i as follows: 

1. if (G|mt iC m r ,c|e) = then M„(S) = m r , c (Q); 

2. if (Q|mt m r)C |Q) ^ then M r , c {Q) = ,™^ {Q) 

V <2| m r, c m r , c |Q) 

Proposition 3 Let Q e 7Y(QV) oe a quantum register. Then: 

1. M r .c{Q) is a quantum register; 

2. Mq. e (Q ® \r i-» d)) = (M g , e (Q)) ® |r h-> d) ; uatfi g£ QV and o ^ r; 
5. M 9 ,e(M r , d (Q)) = M r , rf (M g , e (Q)), withq,re QV; 

4- ifq,re QV, Pr . c = (Q|mt iC m nc |Q),p 9)d - (Qlm^m^lQ), Q nc = M T , C {Q), Q q ,d = M q . d (Q), 

Sr,c = {Qq,dW r>c m r,c\Qq,d) , Sg.rf = {Qr.clm^m^dl Q nc ) i/ien • S g , d = Pg.rf ■ Sr.c,' 

5 - ( U (qi,-,q k )® I QV-{q 1 ,..., qk })(M r , c {Q)) = - A ^r'.c((U ((?li ... i(Zfc) (g)I SV _ {(3l: ...^ fc} )(Q)) {q>l , . . . , q k } C 

QV and r ^ a-,- /or all j = 1, . . . , k. 

Proof. The proofs of [TJ [3] and [5] are immediate consequences of Proposition [2] and of general 
basic properties of Hilbert spaces. About [3] and SI if Q = Ogy then the proof is trivial; if 
either p r<c — or p q ^ — (possibly both), observe that s TtC — s q ^ — and M q . e (M r ,d(Q)) = 
■M r ,d(-M q! e(Q)) = ®QV-{q,r} an d conclude. Suppose now that Q ^ Ogy, p r ^ c ^ and p q: d ^ 0. 
Given the computational basis {&i}ie[i,2»i of 7i(QV — {r, g}), we have that: 



Q=^2,oii\r ^ 0) ® \q h-> 0) ® &; + £$|r i-> 0) <8> |g i-> 1) ® 0i + 

i=l i=l 
2™ 2™ 

^7,|r i-> 1) |g i-f 0) (g) b l + ^8 l \r ^ I) <E> \q ^ 1} <E> b t 



i=i i=i 
Let us examine the case c = and d = (the other cases can be handled in the same way). 

2" 2" 2" 2" 

Pr , - £ M 2 + £ Iftl 2 ; p 9 ,o = £M 2 + £ N 2 ; 

■i— 1 i=l i—l i— 1 
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n u tn\ E^i «i|g -> 0) ® &< + EL Al<? -> 1) ® ft< 



n A/f / n x Ej=i «<lr »-» 0) ® &i + E£i 7<k i-> 1) ® 6< 



Now let us consider the two states: 

Hi' — m CD — Efel a i^i n rfi _ (n s _ Ei=l 



/2V,0 a/^.O 

By definition: 

Etikl 2 „ _Etikl 2 



Sg.O — S r o 

Pr,0 Pq,Q 

and therefore p r! o • s q ,d = P q ,o • s r ,o- Moreover, if QV = then M q fl(Q r ,o) = M r ,o(Q q ,o) = L 
otherwise: 

. , Qyfi Ej=l a i b i ELl ELl 
Ai,,. i,i I 



M r ,o(Qs,o) 



and therefore M g ,o(Qr,o) = ■M r ,o(Qa,o)- □ 
3.1 Computations 

In Q* a computation is performed by reducing configurations. A preconfiguration is a triple 
[Q,QV,M] where: 

• M is a term; 

• QV is a finite quantum variable set such that Q(M) C QV; 

• SeH(QV). 

Let 9 : QV — ► 72.V be a bijective function from a (nonempty) finite set of quantum variables QV 
to another set of quantum variables 1ZV. Then we can extend 9 to any term whose quantum 
variables are included in QV: 6(M) will be identical to M, except on quantum variables, which 
are changed according to 9 itself. Observe that Q(6(M)) C 1ZV. Similarly, 9 can be extended to 
a function from H.(QV) to H(7ZV) in the obvious way. 

Definition 3 (Configurations) Two preconfigurations [Q, QV, M] and [TZ, 1ZV, N] are equiva- 
lent iff there is a bijection 9 : QV — > TZV such that TZ = 9{Q) and N = 9{M) . If a preconfiguration 
C is equivalent to D, then we will write C = D. The relation = is an equivalence relation. A 
configuration is an equivalence class of preconfigurations modulo the relation =. Let Conf be the 
set of configurations. 

Remark 2 The way configurations have been defined, namely quotienting preconfigurations over 
=, is very reminiscent of usual a-conversion in lambda-terms. 

Let Jz? = {Uq, new, q./3, c./?, I.cm, r.cm, ifi, ifo, meas r }. For every a 6 Jz? and for every p E 
%o,i] ; we define a relation — Conf x Conf by the set of contractions in Figure [5J The 
notation C — » Q D stands for C — D. 

In order to be consistent with the so-called non-cloning and non-erasing properties, we adopt 
surface reduction [15j[5]: reduction is not allowed in the scope of any ! operator. Furthermore, as 
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[Q, SV, (Xx.M)N] [Q, QV, M{N/x}] [Q, QV, (Xlx.M)W] -^ c .p 1[Q, QV, M{N/x}\ 

[Q, QV, {X(x!,. . .,x n ).M){n,. . .,7V,)] -J ^ [Q, QV, M{n/xi, r n /x n }} 

[Q, QV, if 1 then Af else TV] [Q, QV, M] 

[Q, QV, if then M else iV] [Q, QV, TV] 

[Q, QV, C/(r n , ...,r;„)] [U <(rji .....^j) Q, QV, <r n , ...,r in >] 

[Q, QV,meas(r)] -^ c ea s r [A4 r , c (Q), QV - {r}, !c] (c e {0, 1} and p c = (Q|m r , c tm r , c |Q) G K [0 ,i]) 

[Q, QV,new(c)] -^ ew [Q ® |r c), QVU{r},r] (r is fresh) 

[Q, QV, L((A7r.M)AT)] [Q, QV, (Att.LM)7V] 

[Q, QV, ((A7r.M)Ar)L] -+} cm [Q, QV, (ATr.Mi)AT] 

[Q, QV, Af] -+g [re,reV,/V] 

U 

[Q, QV, , (Mi, . . . , Af, . . . , M k )\ [H,TIV, {Mi,...,N,..., M k )] 

[Q, QV, N] [re, rev, P] 

r.a 

[Q, QV, MN] -*p [R, TZV, MP] 

[Q, QV, Af] -»£ [7?., TZV, P] 

I. a 

[Q, QV, AW] [re, rev, PN] 

[Q, QV, Af] -+£ [re, TZV, N] 

in. new 

[Q,QV, new(Af)] ^£ [re, reV, new(fV)] 

[Q, QV, Af] -»P [R,TIV,N] 

in.meas 

[Q, QV,meas(M)] -t£ [re.reV.measfAT)] 

[Q, QV, Af] [W,WV,JV] 

in. if 

[Q, QV, if Af then L else P] -*g [re.reV, if Af then L else P] 

[Q, qv, Af] [re, nv, n] [q, qv, Af] -»g [re, rev, at] 

in.Ai in.A2 

[Q, QV, (Ate.Af)] P*, ^V, (Alx.iV)] [Q, QV, (Att.M )] -+£ [re, rev, (Xn.N)] 



Figure 2: Contractions. 

usual, we also forbid reduction in N and P in the term if M then N else P. Observe that 
contractions include two commutative rules I. cm and r.cm (see Figure^]): they come from Q, where 
they were essential to get quantum standardization [5]. 

We distinguish three particular subsets of Jf, namely J?T = {I. cm, r.cm}, JV = _Sf — U 
{meas r }) and n^M = jSf — {meas r }. In the following, we write M — * a N meaning that there are 
Q, QV, K and TZV such that [Q,QV,M] ^ a [K,KV,N]. Similarly for the notation M N 
where 5? is a subset of S£ . 

4 The Confluence Problem: an Informal Introduction 

The confluence problem is central for any quantum A-calculus with measurements, as stressed in 
the introduction. 

Let us consider the following configuration: 

C = [1,0, (A!x.( if x thenO else l))(meas(i?(new(0))))]. 

If we focus on reduction sequences, it is easy to check that there are two different reduction 
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sequences starting with C, the first ending in the normal form [1,0,0] (with probability 1/2) and 
the second in the normal form [1, 0, 1] (with probability 1/2). But if we reason with mixed states, 
the situation changes: the mixed state {1 : C} (i.e., the mixed state assigning probability 1 to C 
and to any other configuration) rewrites deterministically to {1/2 : [1, 0, 0], 1/2 : [1, 0, 1]} (where 
both [1,0,0] and [1,0, 1] have probability 1/2). So, confluence seems to hold. 

Confluence in Other Quantum Calculi. Contrarily to the measurement-free case, the above 
notion of confluence is not an expected result for a quantum lambda calculus. Indeed, it does 
not hold in the quantum lambda calculus X sv proposed by Selinger and Valiron [14] . In X sv , it 
is possible to exhibit a configuration C that gives as outcome the distribution {1 : [1,0,0]} when 
reduced call-by-value and the distribution {1/2 : [1,0,0], 1/2 : [1,0,1]} if reduced call-by-name. 
This is a real failure of confluence, which is there even if one uses probability distributions in place 
of configurations. The same phenomenon cannot happen in Q* (as we will show in Section^: this 
fundamental difference can be traced back to another one: the linear lambda calculus with surface 
reduction (on which Q* is based) enjoys (a slight variation on) the so-called diamond property [15] , 
while in usual, pure, lambda calculus (on which A s „ is based) confluence only holds in a weaker 
sense. 

Finite or infinite rewriting? In Q*, an infinite computation can tend to a configuration 
which is essentially different from the configurations in the computation itself. For example, a 
configuration C = [1, 0, M] can be builtQ such that: 

• after a finite number of reduction steps C rewrites to a distribution in the form {X)i<i< n 'h • 

[1,0,0], . 

• only after infinitely many reduction steps the distribution {1 : [1,0,0]} is reached. 
Therefore finite probability distributions of finite configurations could be obtained by means of 
infinite rewriting. We believe that the study of confluence for infinite computations is important. 

Related Work. In the literature, probabilistic rewriting systems have been already analyzed. 
For example, Bournez and Kirchner [3] have introduced the notion of a probabilistic abstract 
rewriting system as a structure A = [• ~* •]) where \A\ is a set and [• ~-» •] is a function 
from \A\ to K such that for every a £ \A\, J2be\A\i a w b] is either or 1. Then, they define a 
notion of probabilistic confluence for a PARS: such a structure is probabilistically locally confluent 
iff the probability to be locally confluent, in a classical sense, is different from 0. Unfortunately, 
Bournez and Kirchner's analysis does not apply to Q*, since Q* is not a PARS. Indeed, the 
quantity X^fcgui i a can m general be any natural number. Similar considerations hold for the 
probabilistic lambda calculus introduced by Di Pierro, Hankin and Wiklicky in [6 . 

5 A Probabilistic Notion of Computation 

We represent computations as (possibly) infinite trees. In the following, a (possibly) infinite tree 
T will be an (n + l)-tuple [R, T\, . . . , T n ], where n > 0, R is the root of T and Ti, . . . ,T n are its 
immediate subtrees. 

Definition 4 A set of (possibly) infinite trees is said to be a set of probabilistic computations 
if P £ 5? iff (exactly) one of the following three conditions holds: 

1. P=[C] andC £ Conf . 

2. P= [C, R], where C £ Conf, R £ y has root D and C D 

3. P= [(p, q, C), R, Q], where C £ Conf, R,Q £ ,Y have roots D and E, C -^ p meaSr D, C -> q meaSr 
E and p,q £ Mro.i]/ 

The set of all (respectively, the set of finite) probabilistic computations is the largest set (re- 
spectively, the smallest set ,^) of probabilistic computations with respect to set inclusion. & and 

6 exist because of the Knap ster- Tar ski Theorem. 

7 M = (Y!(A!/.A!x if x then else /(meas(//(new(0))))))(meas(//(new(0)))), where Y is a fix point operator. 
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We will often say that the root of P = [(p,q,C),R,Q] is simply C, slightly diverging from the 
above definition without any danger of ambiguity. 

Definition 5 A probabilistic computation P is maximal if for every leaf C in P, C G NF. More 
formally, (sets of) maximal probabilistic computations can be defined as in Definition^ where 
clause]]] must be restricted to C € NF. 

We can give definitions and proofs over finite probabilistic computations (i.e., over by 
ordinary induction. An example is the following definition. Notice that the same is not true for 
arbitrary probabilistic definitions, since @* is not a well-founded set. 

Definition 6 Let P € 0* be a probabilistic computation. A finite probabilistic computation R G & 
is a sub-computation of P , written R E. P iff one of the following conditions is satisfied: 

• R = [C] and the root of P is C. 

• R = [C,Q], P = [C,S], and Q C S. 

• R=[(p,q,C),Q,S], P=[(jp,q,C),U,V], Q^U andS^V. 

Let 5 : Conf — > {0, 1} be a function defined as follows: 5(C) = if the quantum register of C 
is 0, otherwise, 5(C) = 1. 

Quantitative Properties of Computations. The outcomes of a probabilistic computation P 
are given by the configurations which appear as leaves of P. Starting from this observation, the 
following definitions formalize some quantitative properties of probabilistic computations. For 
every finite probabilistic computation P and every C G NF wc define V(P, C) G K.[o,i] by induction 
on the structure of P: 
. V([C],C)=S(C); 

• V([C],D) = whenever C j= D; 
. V([C,P],D)=V(P,D); 

. V([(p, q, C),P, R],D) = P V(P, D) + qV(R, D); 
Similarly for Af(P, C) < H : 
. Af([C],C) = l; 

• Af([C],D) = whenever C ^ D; 
. M([C,P],D)=M(P,D);. 

. N([( P ,q,C),P,R],D)=N(P,D)+N(R,D). 

Informally, V(P, C) is the probability of observing C as a leaf in P, and Af(P, C) is the number 
of times C appears as a leaf in P. 

The definitions above can be easily modified to get the probability of observing any configura- 
tion (in normal form) as a leaf in P, V(P), or the number of times any configuration appears as a 
leaf in P, Af(P). Since K[o,i] and N U {H } are complete lattices (with respect to standard order- 
ings), we extend the above notions to the case of arbitrary probabilistic computations, by taking 
the least upper bound over all finite sub-computations. If P G & and C G NF, then: 

. P(P ) C)=sup REP P(i?,C); 

. N(P,C) =snp RQP Af(R,C); 

. V(P) = sup flEP P(P); 

• N(P) = supflcpjVCR). 

The following lemmas involve finite computations and can be prove by induction. 

Lemma 1 If P C R, then V(P) < V(R) and Af(P) < Af(R). Moreover, V(P, C) < V(R, C) and 
M(P, C) < Af(R, C) for every C G NF. 

Proof. A trivial induction on P. □ 
Lemma 2 If P C R and P is maximal, then R is maximal. 

Proof. A trivial induction on P. □ 
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6 A Strong Confluence Result 



In this Section, we will prove a strong confluence result in the following form: any two maximal 
probabilistic computations P and R with the same root have exactly the same quantitative and 
qualitative behaviour, that is to say, the following equations hold for every C £ NF: 



Remark 3 Please notice that equalities like the ones above do not even hold for the ordinary 
lambda calculus. For example, the lambda term (Xx.Xy.y)fl is the root of two (linear) computations, 
the first having one leaf Xy.y and the second having no leaves. This is the reason why the confluence 
result we prove here is dubbed as strong. 

Before embarking in the proof of the equalities above, let us spend a few words to explain their 
consequences. The fact V(P, C) = V(R, C) whenever P and R have the same root can be read 
as a confluence result: the probability of observing C is independent from the adopted strategy. 
On the other hand, V{P) = V(R) means that the probability of converging is not affected by the 
underlying strategy. The corresponding results on Af(-, •) and jV(-) can be read as saying that the 
number of (not necessarily distinct) leaves in any probabilistic computation with root C does not 
depend on the strategy. 

Lemma 3 (Uniformity) For every M, N such that M — > a N , exactly one of the following con- 
ditions holds: 

1. a =/= new and a meas,- and there is a unitary transformation Um,n ■ ?^(Q(M)) ?^(Q(M)) 
such that [Q, QV,M] -s- Q [K,KV,N] iff [Q, QV,M] S Conf, TZV = QV and TZ = (U m ,n ® 
^QV-Q(M))Q- 

2. a = new and there are a constant c and a quantum variable r such that [Q, QV, M] -^ new 
[TZ, KV,N] iff[Q, QV, M] e Conf, TZV = QV U {r} and K = Q <S> \r h-> c) . 

3. a = meas r and there are a constant c and a probability p c € 1R[o,i] such that [Q, QV, M] — >^ c eaSr 
[TZ, TZV, N] iff [Q, QV, M] e Conf, TZ = M r , c {Q) and TZV = QV - {r}. 

Proof. We go by induction on M. M cannot be a variable nor a constant nor a unitary operator 
nor a term \L. If M is an abstraction Xip.L, then N = Xi/j.P, L P and the thesis follows 
from the inductive hypothesis. If M is meas(L) and N is meas(P) then L — > a P and the thesis 
follows from the inductive hypothesis. Similarly if M is new(L) and N is new(P). And again if M 
is (Mi, . . . ,L, . . . , M n ) and N is (Mi, . . . , P, . . . , M n ). If M = LQ, then we distinguish a number 
of cases: 

• N = PQ and L P. The thesis follows from the inductive hypothesis. 

• N = LS and Q S. The thesis follows from the inductive hypothesis. 

• L = U, Q = (ri,...,r n ) and N = (ri, r n ). Then case [T] holds. In particular, Q(M) = 
{n, ...,r n } and U m .n = U ((n,...,r„»- 

• L = Xx.R and TV = R{Q/x}. Then case[T]holds. In particular Um,n — Iq(m)- 

• L = X(xi, . . . , x n ).R, Q = (ri, . . . , r n ) and N = R{ri/x±, . . . , r n /x n }. Then case[T]holds and 
Um,n = Iq(m)- 

• Lee Xlx.R, Q =\T and N = R{T/x}. Then cased] holds and U m ,n = Iq(m)- 

• Q= (Xir.R)T and N = (Xir.LR)T. Then case [I] holds and U m ,n = Iq(m)- 

• L= {Xii.R)T and N = {Xn.RQ)T. Then case ffl holds and U M ,N = Iq(m)- 

If M = new(c) then TV is a quantum variable r and case [5] holds. If M = meas(r) then there are 
a constant c and a probability p c such that N is a term !c and case [3] holds. This concludes the 
proof. □ 



V(P,C) 
M(P,C) 
T(P) 
N(P) 



V(R,C); 
M{R,C); 
T(R); 
Af(R). 
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Notice that Um,n is always the identity function when performing classical reduction. The fol- 
lowing technical lemma will be useful when proving confluence: 

Lemma 4 Suppose [Q, QV,M] -s- a [1Z,KV,N]. 
1- If [Q, QV, M{L/x}] G Conf, then 

[Q, QV, M{L/x}} ^ a [TZ, TZV, N{L/x}}. 

2. If [Q, QV, M{n/ Xl , r n /x n }} G Conf, then 

[Q, QV, M{n/xi, r n /x n }} ^ a [TZ, TZV, N{n/ Xl , r n /x n }}. 

3. Ifx,T h L and [Q, QV,L{M/x}} € Conf, then 

[Q, QV,L{M/x}} ^ a [TZ,TZV,L{N/x}\. 

Proof. Claims [1] and can be proved by induction on the proof of [Q, QV,M] — * a [TZ,TZV, N]. 
Claim [3] can be proved by induction on N. □ 

We prove now that Q* enjoys a slight variation of the so-called diamond property whose proof is 
fully standard (it is a slight extension of the analogous proof given in [5] for Q). As for Q, Q* does 
not enjoy the diamond property in a strict sense, due to the presence of commutative reduction 
rules (see, e.g., case 2 of the following Proposition). But thanks to Lemma \S\ below, this does not 
have harmful consequences. 

Proposition 4 (Quasi-One-step Confluence) Let C, D, E be configurations with C -^ v a D, 
C E. Then: 

1. If a G J(f and (3 G Jff , then either D = E or there is F with D — >jr F and E — *jf F. 

2. If a G Jfc and (5 G jY , then either D — > jy E or there is F with D — > jy F and E — ►jg' F '. 

3. If a G Jtf and (3 = meas r , then there is F with D -^ eas F and E — >jf F . 

4- If ol G JV and (3 G ,JV , then either D — E or there is F with D — >,yy F and E jy F. 

5. If a £ jY and f3 = meas r , then there is F with D — >fj, eas F and E — >^ F. 

6. If a = meas r and f3 = meas g (r ^ q), then there are t,u G M[o,i] and a F such that pt = su, 
D — >* F and E — >" F 

Proof. Let C = [Q, QV, M]. We go by induction on M. M cannot be a variable nor a constant 
nor a unitary operator. If M is an abstraction Xtt.N, then D = [TZ, TZV, Xtt.S], E = [S, SV, Xtt.T] 
and 



[Q,QV,N] ^ a [1Z,1ZV,S] 
[Q,QV,N] -+ fi [S,SV,T] 

The IH easily leads to the thesis. Similarly when M = Xlx.N, and when M = meas(TV) or 
M = if N then P else Q with N ^ 0, 1. If M = NL, we can distinguish a number of cases 
depending on the last rule used to prove C — D, C —*p sE: 

• D = [K,KV,SL] and E = [S,SV,NR] where [Q, QV,N] [K,KV,S] and [Q, QV, L] 
[S,SV,R]. We need to distinguish several sub-cases: 

• If a, j3 = new, then, by Lemma [3) there exist two quantum variables s,t ^ QV and 
two constants d,e such that TZV = QV U {s}, SV = QV U {*}, TZ = Q <g> \s h-> d) and 
S = Q ® \t t—> e). Applying [3] again, we obtain 

D ^new [Q® \s^>d)®\u^>e),QVU{s,u},SR{u/t}] = F; 
E ^new [Q®\t^e)®\v^d),QVU{t,v},S{u/s}R] = G. 

As can be easily checked, F = G. 
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If a = new and (5 7^ new, meas r , then, by Lemma [3] there exist a quantum variable r 
and a constant c such that TZV = QV U {r}, TZ = Q <g) \r i-» c), <SV = QV and S = 
{Ul,r <8> ^gv-Q(L))Q- As a consequence, applying Lemma |3] again, we obtain 

D [(U L ,R®I QV u{r}-Q(L)){Q®\r^c)),QVU{r},SR} = F; 

E ^ n ew [{{U L ,R®I Q v-Q{L))Q)®\r^c),QVU{r},SR] = G. 

As can be easily checked, F = G. 

If a 7^ new, meas r and /3 = new, then we can proceed as in the previous case. 
If a, j3 7^ new, a 7^ meas r ,/? 7^ meas g (r,q not necessarily distinct) , then by Lemma [3J 
there exist SV = TZV = QV, TZ = (U N , S ® /qv-Q(jv))Q and 5 = (C7 L il g J ev _ Q(i) )Q. 
Applying [3J again, we obtain 

D ->(, [(U L , R ®I QV _ Q{L) )((U N ,s®lQ V - Qi N))Q),QV,SR] = F; 
E ^ a W n ,s®Iqv-q(L))((Ul,r®Iq V -q(l))Q),QV,SR] = G. 

As can be easily checked, F = G. 

If a = meas r ,/3 = meas g (r 7^ q) then, by Lemma [3j there exist two constants d, e and 
two probabilities t,u such that TZV = QV - {r}, SV = QV - {g}, ft = ,Mr,d(Q) and 
5 = Mq t e{Q)- Remember that the quantum variable q occurs in the subterm TV and the 
quantum variable r occurs in the subterm L. Starting from D = [M r ,d(Q)i QV — {r}, SL] 
and E = [M. q , e {Q), QV — {q}, NR], applying [3J again, we obtain 

[M q , e (M r , d (Q)), QV - {r} - {q}, SR] 
[M q , e (K),KV - {q}, SR] = F; 

[Mr, d (M q , e (Q)), QV - {q} - {r}, SR] 

[M r ,d(S),SV-{r},SR] = G. 

Clearly, QV - {r} - {q} = QV - {q} - {r} and by Proposition [3j caseH M q , e (M r ,d(Q)) = 
MrM(M q ,e(Q))- Then F = G. Moreover by Proposition [3J case[3J pt = su. 
If a = new,/3 = meas r , then, by Lemma [3J there exists a quantum variable q (q =/= r) 
two constants d and e and a probability p e such that TZV = QV U {q}, TZ = Q ® \q 1— ► d), 
SV = QV—{r} and S = M r , e {Q)- As a consequence, starting from D = [QVLi{q}, Q<& \q 1— ► 
d), SL] and E = [Ai r ,e(Q), QV — {r}, NR] applying Lemma [3j again, we obtain 

D [Mr, e (Q®\q»<I)),QVU{q}-{r},SR] 

= [M r>e (H),QVU{q}-{r},SR} = F; 

E ^ n ew [{MrAQ))®\<l^d),QV-{r}U{q},SR} 

= [{S)®\q^ d),SVU{q},SR] = G. 

Clearly, QVU{q}~ {r} = QV — {r}(j{q}. By Proposition[3J case[H it is possible to commute 
the measurement of the quantum variable r with the creation of the quantum variable q, in 
fact they are distinct quantum variable. Then M r ,e(Q® \q >— > d)) and (A4 r ,e{Q)) <S> \q 1— ► d) 
give the same quantum register. We can conclude that F = G. 
If a = meas,., j3 = new, the case is symmetric to the previous one. 

If a — meas r ,/3 7^ new,meas,j, then by Lemma [3] there exist a constant c and a prob- 
ability p c such that TZ = M r<c (Q), TZV = QV - {r}, SV = QV and S = (U LtR <g> 
Iqv-Q(L))Q- As a consequence, starting from D = [A^ riC (Q), QV — {r},SL] and E = 
[(Ul,r ® Iqv-q(l))Q, QV,NR], applying Lemma [3J again, we obtain 

[{Ul.R ® I S V-{r}-Q(L))(^r,c(S)), QV - {r}, 

[{u L>R ®i QV _ {r} _ QiL) )(n);nv,SR] = F 

[M r>c ((U L ,R ® /ev-Q(i))C). QV - {r}, 5i?] 
[A^r,c(5),QV-{r},5i?] = G 



meas r 



meas r 
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Note that the operators (Ul,r <8> ^ev-{r}-Q(L)) ° M. r ,c and M r ,c ° (Ul.r <8 ^qv-Q(l)) act 
on Q in the same way, by means of Proposition [3j case [5] We can conclude that F = G. 
• If a new, meas g , /3 = meas r , the case is symmetric to the previous one. 

• D = [K,nV,SL] and E = [S,SV,TL], where [Q,QV,N] -> [R,,KV,S] and [Q, QV, TV] -> 
[S, SV, T\. Here we can apply the inductive hypothesis. 

• D = [K,KV,NR} and E = [S,SV,NU], where [Q,QV,L] -> [K,KV,R} and [Q,QV,L] -> 
[5,5V, C/]. Here we can apply the inductive hypothesis as well. 

• N = (Xx.P), D = [Q,QV,P{L/x}}, E = [1Z,KV,NR}, where [Q,QV,L] [7£,7£V,P]. 
Clearly [Q, QV, P{L/x}} E Conf and, by Lemma H [Q, QV, P{L/x}} -► [ft,7£V, P{P/x}]. 
Moreover, [ft,ftV,TVP] ee [ft, ftV, (Ax.P)P] -> [ft, ftV, P{P/x}]. 

• TV ee (Xx.P), D= [Q,QV,P{L/x}\, E= [JZ,TZV, (Xx.V)L], where [Q,QV,P] [K,KV,V]. 
Clearly [Q, QV, P{L/x}} E Conf and, by LemmaH [Q, QV, P{L/x}] [ft, ftV, V{L/x}]. 
Moreover, [ft, KV, (Xx.V)L] [K,KV,V{L/x}}. 

• TV ee (Xlx.P), L =\Q, D ee [Q,QV,P{Q/x}\, E = [K,KV,{X\x.V)L], where [Q,QV,P] 
[ft,ftV,V]. Clearly [Q,QV,P{Q/x}\ E Conf and, by Lemma 1 [Q, QV,P{Q/x}} 
[ft,ftV, V{Q/ir}]. Moreover, [ft, ftV, (Xx.V)lQ] [ft,ftV, V{Q/a;}]. 

• TV ee (A(xi,...,x„).P), L ee (n,...,r„), D ee [Q,QV,P{ri/xi,...,r n /x n }], 
75 ee [K,KV,(X(x 1 ,...,x n ).V)L], where [Q, QV,P] [ft,ftV,V]. Clearly 
[Q, QV, P{ri/xi, . . . , r n /x n }] E Conf and, by Lemma H [Q, QV, P{ri/xi, r n /x n }] ->£ 
[K,KV,V{r 1 /x 1 ,...,r n /x n }]. Moreover, [K,KV , (X( Xl , . . . , x n ) .V)L] -> (3 
[K,KV,V{r 1 /x 1 ,...,r n /x n }}. 

• TV ee {Xx.P)Q, D ee [Q, QV, (Ax.PL)Q], E = [Q, QV, (P{Q/x})L], a = r.cm, /3 = I./3. Clearly, 
[Q, QV, (Ax.PL)Q] [Q, QV, (P{Q/x})L]. 

• TV ee (Att.P)Q, D ee [Q,QV,(A7r.PL)Q], 75 ee [ft,ftV, ((Att.F)Q)L], a = r.cm, where 
[Q,QV,P] -f^ [ft,ftV,V]. Clearly, [Q,QV,{Xx.PL)Q] -> r . OT [ft, ftV, (As.7i)Q] and 
[ft,ftV,((A7r.V)Q)L] [ft,ftV,(A7r.V".L)Q]. 

• TV ee (Att.P)Q, 73 ee [Q, QV, (Xx.PL)Q], E ee [ft, ftV, ((Xtt.P)W)L], a = r.cm, where 
[Q,QV,Q] [K,KV,W]. Clearly, [Q, QV, (Ax.PZ-)Q] ^ r . cm [ft, ftV, (Xx.PL)W] and 
[ft,ftV,((A7r.P)VL)L] [ft,ftV, (Att.PL)V7]. 

• TV ee {Xn.P)Q, D ee [Q, QV, (Ax.PL)Q], P ee [ft,ftV, ((Xw.P)Q)R], a = r.cm, where 
[Q,QV,L] [K,KV,R]. Clearly, [Q, QV, {Xx.PL)Q\ ^ r . cm [ft, ftV, (Ax.PP)Q] and 

[ft,ftv, ((Att.p)q)p] [n,nv, {Xw.pr)q}. 

. TV ee (Att.P), L ee (Xx.Q)R, D = [Q, QV ,{Xx.NQ)R], E = [Q, QV, N(Q{R/x})}, a = l.cm, 

[3 = 1(3. Clearly, [Q, QV, (Ax.TVQ)P] l./j[Q, QV, TV(Q{P/x})]. 
If M is in the form new(c), then D = E. □ 

Remark 4 Unfortunately, Proposition rj] does nof translate into an equivalent result on mixed 
states, because of commutative reduction rules. As a consequence, it is more convenient to first 
study confluence at the level of probabilistic computations. 

Note that, even if the calculus is untyped, we cannot build an infinite sequence of commuting 
reductions: 

Lemma 5 The relation — * s strongly normalizing. In other words, there cannot be any infinite 
sequence Ci 2 C 3 ■■■■ 

Proof. Define the size \M\ of a term M as the number of symbols in it. Moreover, define the 
abstraction size \M\\ of M as the sum over all subterms of M in the form Xtt.N, of |TV|. Clearly 
\M\ X < \M\ 2 . Moreover, if [Q, QV, TV7] [Q, QV,TV], then |TV| = \M\ but |TV| A > \M\ X . This 
concludes the proof. □ 

We define the weight W(P) and the branch degree B(P) of every finite probabilistic computation 
P by induction on the structure of P: 

• W([C]) = and B([C]) = 1. 

• B([C,P]) = B(P). Moreover, let D be the root of P. If C ->x D, then W([C,P]) = W(P), 
otherwise W([C, P)) = B(P) + W(P). 
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• B([(p, C), P, R]) = B(P) + B(i2), while W([(p, C), P, P]) = B(P) + B(P) + W(P) + W(P). 
Please observe that B(P) > 1 for every P. 

Now we propose a robabilistic variation on the classical strip lemma of the A-calculus. It will 
have a crucial role in the proof of strong confluence (Theorem [T]). 

Lemma 6 (Probabilistic Strip Lemma) Let P be a finite probabilistic computation with root 
C and positive weight W(P). 

• If C -»■ jy D, then there is R with root D such that W(P) < W(P), B(P) < B(P) and for 
every E G NF, it holds that V(R,E) > V(P,E), Af(R, E) > Af(P,E), V(R) > V(P) and 
N(R) >Af(P). 

• If C D, then there is R with root D such that W(P) < W(P), B(P) < B(P) and for 
every E G NF, it holds that V(R,E) > V{P,E), N{R, E) > J\f(P,E), V(R) > V(P) and 
Af(R)>Af(P). 

• If C ^meas D and C — >^ ea5 E , then there are R and Q with roots D and E such that 
W(P) < W(P), W(Q) < W(P) r ; B(P) < B(P), B(Q) < B(P) and for every E G NF, it holds 
that qV(R, E) + P T{Q, E) > V(P, E), Af(R, E) +N(Q, E) > Af(P, E), qP{R) + P T{Q) > T{P) 
andJV{R) +AT{Q)>Af{P). 

Proof. By induction on the structure of P: 

• P cannot simply be [C], because W(P) > 1. 

• If P = [C, S], where S has root F and C F, then: 

• Suppose C — >jy D- If D = F, then the required R is simply S. Otherwise, by Proposition 
[H there is G such that D —>,yy G and F jy G. Now, if S is simply [F], then the 
required probabilistic computation is simply [D], because neither F nor D are in normal 
form and, moreover, W([P]) = < 1 = W(P). If, on the other hand, S has positive 
weight we can apply the IH to it, obtaining a probabilistic computation T with root G such 
that W(T) < W(5), B(T) < B(5), T(T,H) > V{S,H) and N(T, H) > N{S,H) for every 
H G NF. Then, the required probabilistic computation is [D,T], since 

W([P,T]) = B(T) + W(P) < B(T) + W(S') 
< B(5)+W(S*) = W(P); 
V([D,T],H) = V(T,H)>V(S,H) 

= P(PP); 
Af([D,T],H) = Af(T,H)>Af(S,H) 
= N{P,H). 

• Suppose C -^.j? D. By Proposition Q] one of the following two cases applies: 

• There is G such that D G and F G Now, if S is simply [P], then the 
required probabilistic computation is simply [D, [G]], because W([P, [G]]) = 1 = W(P). 
If, on the other hand, 5* has positive weight we can apply the IH to it, obtaining a 
probabilistic computation T with root G such that W(P) < W(5), B(P) < B(S) and 
V(T,H) > V(T,H) for every H G NF. Then, the required probabilistic computation is 
[D, T], since 

\N([D,T}) = B(T) + W(T) < B(T) + W(S') 
< B(5) +W(5) = W(P) 
V([D,T],H) = T(T,H)>T(S,H) 

= V(P,H); 
M{[D,T],H) = Af(T,H)>Af(S,H) 
= J\f(P, H). 

• D — > F. The required probabilistic computation is simply [D, S]. Indeed: 

W([£>,5]) = B(5) +W(5) = W([C,5]) = W([P]). 
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Suppose C — *meas r D and C ^meas,. By Proposition IH there are G and H such that 
D — »^ G, E -^>jy H, F — *Jj|, eaSr G, F — ^ eaSr H. Now, if S is simply F, then the required 
probabilistic computations are simply [D] and [E], because neither F nor D nor 1? are in 
normal form and, moreover, W([D]) = \N([E}) = < 1 = W(P). If, on the other hand, S 
has positive weight we can apply the IH to it, obtaining probabilistic computations T and U 
with roots G and H such that W(T) < W(5), W(C/) < W(S), B(T) < B(5), B([/) < B(5), 
qV(T, H) + (p)P(U, H) > P(S, H) and M(T, H) + Af{U, H) > M(S, H) for every H e NF. 
Then, the required probabilistic computations are [D,T] and [E, U], since 

\N([D,T}) = B(T) + W(T) < B(T) + W(5) 

< B(S)+W(S)=W(P); 
W([£7,E7]) - B([/)+W([/) < B(l/)+W(S) 

< B(S)+W(5) = W(P). 

Moreover, for every S NF 

? P([Ar],if)+pP([^,C/] ) if) = qV(T,H)+ P V(U,H) 

> V(S,H) =T{P,H) 
JV([D,T],H)+JV([E,U],H) = JV(T,H)+Af(U,H) 

> Af(S, H) = Af(P 7 H) 



The other cases are similar. 



□ 



The following Proposition follows from the probabilistic strip lemma. It can be read as a simulation 
result: if P and R are maximal and have the same root, then P can simulate R (and viceversa). 

Proposition 5 For every maximal probabilistic computations P and for every finite probabilistic 
computation R such that P and R have the same root, there is a finite sub- computation Q of P such 
that for every C € NF, V{Q,C) > V(R,C) andN(Q,C) > Af(R,C). Moreover, V{Q) > V{R) 
andN{Q) >M{R). 

Proof. Given any probabilistic computation S, its J^-degree n$ is the number of consecutive 
commutative rules you find descending S, starting at the root. By Lemma this is a good 
definition. The proof goes by induction on (\N(R),nn), ordered lexicographically: 

• If W(i?) = 0, then R is just [D] for some configuration D. Then, Q = R and all the required 
conditions hold. 

• If W(i?) > 0, then we distinguish three cases, depending on the shape of P: 

• If P = [D, S], E is the root of S and D —> E, then, by Proposition[6l there is a probabilis- 
tic computation T with root E such that W(T) < W(i?) and T(T, C) > V(R, C) for every 
C € NF. By the inductive hypothesis applied to S and T, there is a sub-probabilistic com- 
putation U of S such that V(U, C) > V(T, C) and Af(U, C) > Af(T, C) for every C € NF. 
Now, consider the probabilistic computation [D,U]. This is clearly a sub- probabilistic 
computation of P. Moreover, for every C 6 NF: 

V([D,U],C) = V(U,C) 

> V{T,C)>V{R,C) 
N{[D,U],C) = M{U,C) 

> N{T,C)>N{R 1 C). 

• If P = [D,S], E is the root of S and D E, then, by Proposition [6J there is a 
probabilistic computation T with root E such that W(T) < \N(R) and V(T, C) > V{R, C) 
for every C E NF. Now, observe we can apply the inductive hypothesis to S and T, because 
W(T) < W(i?) and ns < rip. So, there is a sub-probabilistic computation U of S such 
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that V(U,C) > T(T,C) and Af(U,C) > N{T,C) for every C € NF. Now, consider the 
probabilistic computation [D, U]. This is clearly a sub-probabilistic computation of P. 
Moreover, for every C G NF: 

V([D,U],C) = V(U,C) 

> V{T,C)>V{R,C) 
M{[D,U],C) = M{U,C) 

> N{T,C)>N{R,C). 

• P = [(jp,q,D),Si,S2], Ei is the root of Si and E 2 is the root of S 2 , then, by Propo- 
sition O there are probabilistic computations T\ and T 2 with root Ei and E2 such that 
\N(T 1 ),W(T 2 ) < W(i?) and P V(Ti,C) + qV(T 2 ,C) > V(R,C) for every C G NF. By the 
inductive hypothesis applied to Si and T\ (to Si and T 2 , respectively), there is a sub- 
probabilistic computation U± of Si (a sub-probabilistic computation U 2 of S2 , respectively) 
such that V(Ui,C) > V{Ti,C) for every C G NF (V(U 2 , C) >V(T 2 , C) for every C G NF, 
respectively). Now, consider the probabilistic computation \{p, q, D),U±, U 2 ]. This is clearly 
a sub-probabilistic computation of P. Moreover, for every C G NF: 

V([( P ,q,D,Ui,U 2 ],C) = P V(Ui,C) + qV(U 2l C) 

> P P(T 1 ,C)+qV(T 2 ,C)>P(R,C). 

This concludes the proof. □ 

The main theorem is the following: 

Theorem 1 (Strong Confluence) For every maximal probabilistic computation P , for every 
maximal probabilistic computation R such that P and R have the same root, and for every C G NF, 
V{P,C) =V{R,C) andAf(P,C) =J\f(R,C). Moreover, V(P) =V{R) andAf(P) =Af(R). 

Proof. Let C G NF be any configuration in normal form. Clearly: 

V(P, C) = sup QEP {7>(Q, C)} V(R, C) = sup SGR {V(S, C)} 

Now, consider the two sets A — {7 5 (Q, C)}qcp and B = {P(S, C)}stzR- We claim the two sets 
have the same upper bounds. Indeed, if x G R is an upper bound on A and S C i?, by Proposition[5] 
there is Q C P such that T-^Q, C) > V(S, C), and so x > V(S, C). As a consequence, x is an upper 
bound on B. Symmetrically, if x is an upper bound on _B, it is an upper bound on A. Since A and 
B have the same upper bounds, they have the same least upper bound, and V(P, C) — V(R, C). 
The other claims can be proved exactly in the same way. This concludes the proof. □ 

7 Computing with Mixed States 

Definition 7 (Mixed State) A mixed state is a function ^# : Conf — ► R^i] such that there is 
a finite set S C Conf with ./#(C) = except when C G S and, moreover, X^ceS -^(P) = 1. Mix 
is the set of mixed states. 

In this paper, a mixed state will be denoted with the linear notation {pi : C±, . . . ,pk '■ Ck} or 
as {pi : Ci}i<i<ki where pi is the probability ^#(C^) associated to the configuration Ci. 

Definition 8 (Reduction) The reduction relation l=> between mixed states is defined in the 
following way: {pi : Ci, . . . ,p m : C m } !==>■ . // iff there exist m mixed states = {q\ : 
DJ}i< i6ni , . . . , Jt m = {q l m : -DJ rl }i< l <„ m such that: 

1. For every i G [1, m], it holds that 1 < rij < 2; 

2. If ni = 1, then either Ci is in normal form and Ci — Dj or C'i —> n j( D\; 

3. Ifm = 2, then C l -+ p meaSr Dj, Ci ->« eaSr Df, p G R [0A] , and q\ =p,q% = q; 
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I VP> £ Conf. Jt(D) = YZLiPi ■ -^iiP). 



Given the reduction relation l=>, the corresponding notion of computation (that we call mixed 
computation, in order to emphasize that mixed states play the role of configurations) is completely 
standard. 

Given a mixed state j& and a configuration C £ NF, the probability of observing C in ^# is 
defined as jtf(C) and is denoted as V{y%,C). Observe that if t=> and C £ NF, then 
V(^f,C) < V(^',C). If {-#i}i< ¥ j is a mixed computation, then 

sup V{Jti,C) 

i<ip 

always exists, and is denoted as 'P({^#i}i< ¥ ,, C). 

Please notice that a maximal mixed computation is always infinite. Indeed, if ^# = {pi : 
Ci}i<i< n and for every % £ [l,n],Cj £ NF, then JK t=^> 

Proposition 6 Let {^i}i<:u be a maximal mixed computation and let C\, . . . , C' n be the configura- 
tions on which evaluates to a positive real. Then there are maximal probabilistic computations 
Pi, . . . ,P n with roots Ci, . . . , C n such that sxxpj <v ^j(D) = Yli=i (-^o(Ci)V(Pi, D)) for every D. 

Proof. Let {^#i}i< w be a maximal mixed computation. Observe that JKq t=> m for every 
m £N. For every m £ N let be 

{p m :Cr,...,p™ m :C™J 

For every m, we can build maximal probabilistic computations P™, . . . , P™ m , generatively: assum- 
ing P" i+1 , . . . , P^} t are the probabilistic computations corresponding to {^#i} m +i<i< w , they can 
be extended (and possibly merged) into some maximal probabilistic computations Pf™, . . . , P™ 
corresponding to {^i\ m <i<u- But we can even define for every m, k £ N with m < k, some finite 
probabilistic computations Q™' k , . . . , with root Ci, . . . , C„ m and such that, for every m, k, 

Q m,k ^ p rn 
i=l 

This proceeds by induction on fc — m. We can easily prove that for every S C P™ there is k such 
that S C Q™' K : this is an induction on S (which is a finite probabilistic computation) . But now, 
for every D £ NF, 

no 

sup .#,(£>) = sup ^(.# (Ci)P(Q •'',£>)) 
= ^ ^o(C 4 )su P P(0° J ,^) 

no 

= ^(^(C^CP^-D)) 

i=l 

This concludes the proof. □ 

Theorem 2 Por anj/ two maximal mixed computations {~#i}i< w and {^#/}i< w swc/i £/iaf »/#o = 
^#o, i/ie following condition holds: for every C £ NF, P({^#i}i< w , C) = P({^/}i<u, G) 

Proof. A trivial consequence of Proposition □ 
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8 Conclusions 



The quantum lambda calculus Q* is proved to enjoy confluence in a very strong form, both for 
finite and for infinite computations. The proof seems to be quite independent on the particular 
rewriting system under consideration. Actually, the authors believe that any rewriting system 
enjoying properties like Proposition |J] enjoys confluence in the same sense as the one used here. 
Indeed, this constitutes an interesting topic for further work, which anyway lies outside the scope 
of this paper. 
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